rustls/
enums.rs

1#![allow(non_camel_case_types)]
2#![allow(missing_docs)]
3use crate::msgs::codec::{Codec, Reader};
4use crate::msgs::enums::HashAlgorithm;
5
6enum_builder! {
7    /// The `AlertDescription` TLS protocol enum.  Values in this enum are taken
8    /// from the various RFCs covering TLS, and are listed by IANA.
9    /// The `Unknown` item is used when processing unrecognised ordinals.
10    #[repr(u8)]
11    pub enum AlertDescription {
12        CloseNotify => 0x00,
13        UnexpectedMessage => 0x0a,
14        BadRecordMac => 0x14,
15        DecryptionFailed => 0x15,
16        RecordOverflow => 0x16,
17        DecompressionFailure => 0x1e,
18        HandshakeFailure => 0x28,
19        NoCertificate => 0x29,
20        BadCertificate => 0x2a,
21        UnsupportedCertificate => 0x2b,
22        CertificateRevoked => 0x2c,
23        CertificateExpired => 0x2d,
24        CertificateUnknown => 0x2e,
25        IllegalParameter => 0x2f,
26        UnknownCA => 0x30,
27        AccessDenied => 0x31,
28        DecodeError => 0x32,
29        DecryptError => 0x33,
30        ExportRestriction => 0x3c,
31        ProtocolVersion => 0x46,
32        InsufficientSecurity => 0x47,
33        InternalError => 0x50,
34        InappropriateFallback => 0x56,
35        UserCanceled => 0x5a,
36        NoRenegotiation => 0x64,
37        MissingExtension => 0x6d,
38        UnsupportedExtension => 0x6e,
39        CertificateUnobtainable => 0x6f,
40        UnrecognisedName => 0x70,
41        BadCertificateStatusResponse => 0x71,
42        BadCertificateHashValue => 0x72,
43        UnknownPSKIdentity => 0x73,
44        CertificateRequired => 0x74,
45        NoApplicationProtocol => 0x78,
46        EncryptedClientHelloRequired => 0x79, // https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni-18#section-11.2
47    }
48}
49
50enum_builder! {
51    /// The `HandshakeType` TLS protocol enum.  Values in this enum are taken
52    /// from the various RFCs covering TLS, and are listed by IANA.
53    /// The `Unknown` item is used when processing unrecognised ordinals.
54    #[repr(u8)]
55    pub enum HandshakeType {
56        HelloRequest => 0x00,
57        ClientHello => 0x01,
58        ServerHello => 0x02,
59        HelloVerifyRequest => 0x03,
60        NewSessionTicket => 0x04,
61        EndOfEarlyData => 0x05,
62        HelloRetryRequest => 0x06,
63        EncryptedExtensions => 0x08,
64        Certificate => 0x0b,
65        ServerKeyExchange => 0x0c,
66        CertificateRequest => 0x0d,
67        ServerHelloDone => 0x0e,
68        CertificateVerify => 0x0f,
69        ClientKeyExchange => 0x10,
70        Finished => 0x14,
71        CertificateURL => 0x15,
72        CertificateStatus => 0x16,
73        KeyUpdate => 0x18,
74        CompressedCertificate => 0x19,
75        MessageHash => 0xfe,
76    }
77}
78
79enum_builder! {
80    /// The `ContentType` TLS protocol enum.  Values in this enum are taken
81    /// from the various RFCs covering TLS, and are listed by IANA.
82    /// The `Unknown` item is used when processing unrecognised ordinals.
83    #[repr(u8)]
84    pub enum ContentType {
85        ChangeCipherSpec => 0x14,
86        Alert => 0x15,
87        Handshake => 0x16,
88        ApplicationData => 0x17,
89        Heartbeat => 0x18,
90    }
91}
92
93enum_builder! {
94    /// The `ProtocolVersion` TLS protocol enum.  Values in this enum are taken
95    /// from the various RFCs covering TLS, and are listed by IANA.
96    /// The `Unknown` item is used when processing unrecognised ordinals.
97    #[repr(u16)]
98    pub enum ProtocolVersion {
99        SSLv2 => 0x0002,
100        SSLv3 => 0x0300,
101        TLSv1_0 => 0x0301,
102        TLSv1_1 => 0x0302,
103        TLSv1_2 => 0x0303,
104        TLSv1_3 => 0x0304,
105        DTLSv1_0 => 0xFEFF,
106        DTLSv1_2 => 0xFEFD,
107        DTLSv1_3 => 0xFEFC,
108    }
109}
110
111enum_builder! {
112    /// The `CipherSuite` TLS protocol enum.  Values in this enum are taken
113    /// from the various RFCs covering TLS, and are listed by IANA.
114    /// The `Unknown` item is used when processing unrecognised ordinals.
115    #[repr(u16)]
116    pub enum CipherSuite {
117        TLS_NULL_WITH_NULL_NULL => 0x0000,
118        TLS_PSK_WITH_AES_128_GCM_SHA256 => 0x00a8,
119        TLS_PSK_WITH_AES_256_GCM_SHA384 => 0x00a9,
120        TLS_EMPTY_RENEGOTIATION_INFO_SCSV => 0x00ff,
121        TLS13_AES_128_GCM_SHA256 => 0x1301,
122        TLS13_AES_256_GCM_SHA384 => 0x1302,
123        TLS13_CHACHA20_POLY1305_SHA256 => 0x1303,
124        TLS13_AES_128_CCM_SHA256 => 0x1304,
125        TLS13_AES_128_CCM_8_SHA256 => 0x1305,
126        TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA => 0xc009,
127        TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA => 0xc00a,
128        TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA => 0xc013,
129        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA => 0xc014,
130        TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 => 0xc023,
131        TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 => 0xc024,
132        TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 => 0xc027,
133        TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 => 0xc028,
134        TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 => 0xc02b,
135        TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 => 0xc02c,
136        TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 => 0xc02f,
137        TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 => 0xc030,
138        TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 => 0xcca8,
139        TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 => 0xcca9,
140
141    !Debug:
142        TLS_RSA_WITH_NULL_MD5 => 0x0001,
143        TLS_RSA_WITH_NULL_SHA => 0x0002,
144        TLS_RSA_EXPORT_WITH_RC4_40_MD5 => 0x0003,
145        TLS_RSA_WITH_RC4_128_MD5 => 0x0004,
146        TLS_RSA_WITH_RC4_128_SHA => 0x0005,
147        TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 => 0x0006,
148        TLS_RSA_WITH_IDEA_CBC_SHA => 0x0007,
149        TLS_RSA_EXPORT_WITH_DES40_CBC_SHA => 0x0008,
150        TLS_RSA_WITH_DES_CBC_SHA => 0x0009,
151        TLS_RSA_WITH_3DES_EDE_CBC_SHA => 0x000a,
152        TLS_DH_DSS_EXPORT_WITH_DES40_CBC_SHA => 0x000b,
153        TLS_DH_DSS_WITH_DES_CBC_SHA => 0x000c,
154        TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA => 0x000d,
155        TLS_DH_RSA_EXPORT_WITH_DES40_CBC_SHA => 0x000e,
156        TLS_DH_RSA_WITH_DES_CBC_SHA => 0x000f,
157        TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA => 0x0010,
158        TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA => 0x0011,
159        TLS_DHE_DSS_WITH_DES_CBC_SHA => 0x0012,
160        TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA => 0x0013,
161        TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA => 0x0014,
162        TLS_DHE_RSA_WITH_DES_CBC_SHA => 0x0015,
163        TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA => 0x0016,
164        TLS_DH_anon_EXPORT_WITH_RC4_40_MD5 => 0x0017,
165        TLS_DH_anon_WITH_RC4_128_MD5 => 0x0018,
166        TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA => 0x0019,
167        TLS_DH_anon_WITH_DES_CBC_SHA => 0x001a,
168        TLS_DH_anon_WITH_3DES_EDE_CBC_SHA => 0x001b,
169        SSL_FORTEZZA_KEA_WITH_NULL_SHA => 0x001c,
170        SSL_FORTEZZA_KEA_WITH_FORTEZZA_CBC_SHA => 0x001d,
171        TLS_KRB5_WITH_DES_CBC_SHA_or_SSL_FORTEZZA_KEA_WITH_RC4_128_SHA => 0x001e,
172        TLS_KRB5_WITH_3DES_EDE_CBC_SHA => 0x001f,
173        TLS_KRB5_WITH_RC4_128_SHA => 0x0020,
174        TLS_KRB5_WITH_IDEA_CBC_SHA => 0x0021,
175        TLS_KRB5_WITH_DES_CBC_MD5 => 0x0022,
176        TLS_KRB5_WITH_3DES_EDE_CBC_MD5 => 0x0023,
177        TLS_KRB5_WITH_RC4_128_MD5 => 0x0024,
178        TLS_KRB5_WITH_IDEA_CBC_MD5 => 0x0025,
179        TLS_KRB5_EXPORT_WITH_DES_CBC_40_SHA => 0x0026,
180        TLS_KRB5_EXPORT_WITH_RC2_CBC_40_SHA => 0x0027,
181        TLS_KRB5_EXPORT_WITH_RC4_40_SHA => 0x0028,
182        TLS_KRB5_EXPORT_WITH_DES_CBC_40_MD5 => 0x0029,
183        TLS_KRB5_EXPORT_WITH_RC2_CBC_40_MD5 => 0x002a,
184        TLS_KRB5_EXPORT_WITH_RC4_40_MD5 => 0x002b,
185        TLS_PSK_WITH_NULL_SHA => 0x002c,
186        TLS_DHE_PSK_WITH_NULL_SHA => 0x002d,
187        TLS_RSA_PSK_WITH_NULL_SHA => 0x002e,
188        TLS_RSA_WITH_AES_128_CBC_SHA => 0x002f,
189        TLS_DH_DSS_WITH_AES_128_CBC_SHA => 0x0030,
190        TLS_DH_RSA_WITH_AES_128_CBC_SHA => 0x0031,
191        TLS_DHE_DSS_WITH_AES_128_CBC_SHA => 0x0032,
192        TLS_DHE_RSA_WITH_AES_128_CBC_SHA => 0x0033,
193        TLS_DH_anon_WITH_AES_128_CBC_SHA => 0x0034,
194        TLS_RSA_WITH_AES_256_CBC_SHA => 0x0035,
195        TLS_DH_DSS_WITH_AES_256_CBC_SHA => 0x0036,
196        TLS_DH_RSA_WITH_AES_256_CBC_SHA => 0x0037,
197        TLS_DHE_DSS_WITH_AES_256_CBC_SHA => 0x0038,
198        TLS_DHE_RSA_WITH_AES_256_CBC_SHA => 0x0039,
199        TLS_DH_anon_WITH_AES_256_CBC_SHA => 0x003a,
200        TLS_RSA_WITH_NULL_SHA256 => 0x003b,
201        TLS_RSA_WITH_AES_128_CBC_SHA256 => 0x003c,
202        TLS_RSA_WITH_AES_256_CBC_SHA256 => 0x003d,
203        TLS_DH_DSS_WITH_AES_128_CBC_SHA256 => 0x003e,
204        TLS_DH_RSA_WITH_AES_128_CBC_SHA256 => 0x003f,
205        TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 => 0x0040,
206        TLS_RSA_WITH_CAMELLIA_128_CBC_SHA => 0x0041,
207        TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA => 0x0042,
208        TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA => 0x0043,
209        TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA => 0x0044,
210        TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA => 0x0045,
211        TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA => 0x0046,
212        TLS_ECDH_ECDSA_WITH_NULL_SHA_draft => 0x0047,
213        TLS_ECDH_ECDSA_WITH_RC4_128_SHA_draft => 0x0048,
214        TLS_ECDH_ECDSA_WITH_DES_CBC_SHA_draft => 0x0049,
215        TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA_draft => 0x004a,
216        TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA_draft => 0x004b,
217        TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA_draft => 0x004c,
218        TLS_ECDH_ECNRA_WITH_DES_CBC_SHA_draft => 0x004d,
219        TLS_ECDH_ECNRA_WITH_3DES_EDE_CBC_SHA_draft => 0x004e,
220        TLS_ECMQV_ECDSA_NULL_SHA_draft => 0x004f,
221        TLS_ECMQV_ECDSA_WITH_RC4_128_SHA_draft => 0x0050,
222        TLS_ECMQV_ECDSA_WITH_DES_CBC_SHA_draft => 0x0051,
223        TLS_ECMQV_ECDSA_WITH_3DES_EDE_CBC_SHA_draft => 0x0052,
224        TLS_ECMQV_ECNRA_NULL_SHA_draft => 0x0053,
225        TLS_ECMQV_ECNRA_WITH_RC4_128_SHA_draft => 0x0054,
226        TLS_ECMQV_ECNRA_WITH_DES_CBC_SHA_draft => 0x0055,
227        TLS_ECMQV_ECNRA_WITH_3DES_EDE_CBC_SHA_draft => 0x0056,
228        TLS_ECDH_anon_NULL_WITH_SHA_draft => 0x0057,
229        TLS_ECDH_anon_WITH_RC4_128_SHA_draft => 0x0058,
230        TLS_ECDH_anon_WITH_DES_CBC_SHA_draft => 0x0059,
231        TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA_draft => 0x005a,
232        TLS_ECDH_anon_EXPORT_WITH_DES40_CBC_SHA_draft => 0x005b,
233        TLS_ECDH_anon_EXPORT_WITH_RC4_40_SHA_draft => 0x005c,
234        TLS_RSA_EXPORT1024_WITH_RC4_56_MD5 => 0x0060,
235        TLS_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5 => 0x0061,
236        TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA => 0x0062,
237        TLS_DHE_DSS_EXPORT1024_WITH_DES_CBC_SHA => 0x0063,
238        TLS_RSA_EXPORT1024_WITH_RC4_56_SHA => 0x0064,
239        TLS_DHE_DSS_EXPORT1024_WITH_RC4_56_SHA => 0x0065,
240        TLS_DHE_DSS_WITH_RC4_128_SHA => 0x0066,
241        TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 => 0x0067,
242        TLS_DH_DSS_WITH_AES_256_CBC_SHA256 => 0x0068,
243        TLS_DH_RSA_WITH_AES_256_CBC_SHA256 => 0x0069,
244        TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 => 0x006a,
245        TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 => 0x006b,
246        TLS_DH_anon_WITH_AES_128_CBC_SHA256 => 0x006c,
247        TLS_DH_anon_WITH_AES_256_CBC_SHA256 => 0x006d,
248        TLS_DHE_DSS_WITH_3DES_EDE_CBC_RMD => 0x0072,
249        TLS_DHE_DSS_WITH_AES_128_CBC_RMD => 0x0073,
250        TLS_DHE_DSS_WITH_AES_256_CBC_RMD => 0x0074,
251        TLS_DHE_RSA_WITH_3DES_EDE_CBC_RMD => 0x0077,
252        TLS_DHE_RSA_WITH_AES_128_CBC_RMD => 0x0078,
253        TLS_DHE_RSA_WITH_AES_256_CBC_RMD => 0x0079,
254        TLS_RSA_WITH_3DES_EDE_CBC_RMD => 0x007c,
255        TLS_RSA_WITH_AES_128_CBC_RMD => 0x007d,
256        TLS_RSA_WITH_AES_256_CBC_RMD => 0x007e,
257        TLS_GOSTR341094_WITH_28147_CNT_IMIT => 0x0080,
258        TLS_GOSTR341001_WITH_28147_CNT_IMIT => 0x0081,
259        TLS_GOSTR341094_WITH_NULL_GOSTR3411 => 0x0082,
260        TLS_GOSTR341001_WITH_NULL_GOSTR3411 => 0x0083,
261        TLS_RSA_WITH_CAMELLIA_256_CBC_SHA => 0x0084,
262        TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA => 0x0085,
263        TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA => 0x0086,
264        TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA => 0x0087,
265        TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA => 0x0088,
266        TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA => 0x0089,
267        TLS_PSK_WITH_RC4_128_SHA => 0x008a,
268        TLS_PSK_WITH_3DES_EDE_CBC_SHA => 0x008b,
269        TLS_PSK_WITH_AES_128_CBC_SHA => 0x008c,
270        TLS_PSK_WITH_AES_256_CBC_SHA => 0x008d,
271        TLS_DHE_PSK_WITH_RC4_128_SHA => 0x008e,
272        TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA => 0x008f,
273        TLS_DHE_PSK_WITH_AES_128_CBC_SHA => 0x0090,
274        TLS_DHE_PSK_WITH_AES_256_CBC_SHA => 0x0091,
275        TLS_RSA_PSK_WITH_RC4_128_SHA => 0x0092,
276        TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA => 0x0093,
277        TLS_RSA_PSK_WITH_AES_128_CBC_SHA => 0x0094,
278        TLS_RSA_PSK_WITH_AES_256_CBC_SHA => 0x0095,
279        TLS_RSA_WITH_SEED_CBC_SHA => 0x0096,
280        TLS_DH_DSS_WITH_SEED_CBC_SHA => 0x0097,
281        TLS_DH_RSA_WITH_SEED_CBC_SHA => 0x0098,
282        TLS_DHE_DSS_WITH_SEED_CBC_SHA => 0x0099,
283        TLS_DHE_RSA_WITH_SEED_CBC_SHA => 0x009a,
284        TLS_DH_anon_WITH_SEED_CBC_SHA => 0x009b,
285        TLS_RSA_WITH_AES_128_GCM_SHA256 => 0x009c,
286        TLS_RSA_WITH_AES_256_GCM_SHA384 => 0x009d,
287        TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 => 0x009e,
288        TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 => 0x009f,
289        TLS_DH_RSA_WITH_AES_128_GCM_SHA256 => 0x00a0,
290        TLS_DH_RSA_WITH_AES_256_GCM_SHA384 => 0x00a1,
291        TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 => 0x00a2,
292        TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 => 0x00a3,
293        TLS_DH_DSS_WITH_AES_128_GCM_SHA256 => 0x00a4,
294        TLS_DH_DSS_WITH_AES_256_GCM_SHA384 => 0x00a5,
295        TLS_DH_anon_WITH_AES_128_GCM_SHA256 => 0x00a6,
296        TLS_DH_anon_WITH_AES_256_GCM_SHA384 => 0x00a7,
297        TLS_DHE_PSK_WITH_AES_128_GCM_SHA256 => 0x00aa,
298        TLS_DHE_PSK_WITH_AES_256_GCM_SHA384 => 0x00ab,
299        TLS_RSA_PSK_WITH_AES_128_GCM_SHA256 => 0x00ac,
300        TLS_RSA_PSK_WITH_AES_256_GCM_SHA384 => 0x00ad,
301        TLS_PSK_WITH_AES_128_CBC_SHA256 => 0x00ae,
302        TLS_PSK_WITH_AES_256_CBC_SHA384 => 0x00af,
303        TLS_PSK_WITH_NULL_SHA256 => 0x00b0,
304        TLS_PSK_WITH_NULL_SHA384 => 0x00b1,
305        TLS_DHE_PSK_WITH_AES_128_CBC_SHA256 => 0x00b2,
306        TLS_DHE_PSK_WITH_AES_256_CBC_SHA384 => 0x00b3,
307        TLS_DHE_PSK_WITH_NULL_SHA256 => 0x00b4,
308        TLS_DHE_PSK_WITH_NULL_SHA384 => 0x00b5,
309        TLS_RSA_PSK_WITH_AES_128_CBC_SHA256 => 0x00b6,
310        TLS_RSA_PSK_WITH_AES_256_CBC_SHA384 => 0x00b7,
311        TLS_RSA_PSK_WITH_NULL_SHA256 => 0x00b8,
312        TLS_RSA_PSK_WITH_NULL_SHA384 => 0x00b9,
313        TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 => 0x00ba,
314        TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA256 => 0x00bb,
315        TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA256 => 0x00bc,
316        TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA256 => 0x00bd,
317        TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 => 0x00be,
318        TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA256 => 0x00bf,
319        TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 => 0x00c0,
320        TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA256 => 0x00c1,
321        TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA256 => 0x00c2,
322        TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA256 => 0x00c3,
323        TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 => 0x00c4,
324        TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA256 => 0x00c5,
325        TLS_ECDH_ECDSA_WITH_NULL_SHA => 0xc001,
326        TLS_ECDH_ECDSA_WITH_RC4_128_SHA => 0xc002,
327        TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA => 0xc003,
328        TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA => 0xc004,
329        TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA => 0xc005,
330        TLS_ECDHE_ECDSA_WITH_NULL_SHA => 0xc006,
331        TLS_ECDHE_ECDSA_WITH_RC4_128_SHA => 0xc007,
332        TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA => 0xc008,
333        TLS_ECDH_RSA_WITH_NULL_SHA => 0xc00b,
334        TLS_ECDH_RSA_WITH_RC4_128_SHA => 0xc00c,
335        TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA => 0xc00d,
336        TLS_ECDH_RSA_WITH_AES_128_CBC_SHA => 0xc00e,
337        TLS_ECDH_RSA_WITH_AES_256_CBC_SHA => 0xc00f,
338        TLS_ECDHE_RSA_WITH_NULL_SHA => 0xc010,
339        TLS_ECDHE_RSA_WITH_RC4_128_SHA => 0xc011,
340        TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA => 0xc012,
341        TLS_ECDH_anon_WITH_NULL_SHA => 0xc015,
342        TLS_ECDH_anon_WITH_RC4_128_SHA => 0xc016,
343        TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA => 0xc017,
344        TLS_ECDH_anon_WITH_AES_128_CBC_SHA => 0xc018,
345        TLS_ECDH_anon_WITH_AES_256_CBC_SHA => 0xc019,
346        TLS_SRP_SHA_WITH_3DES_EDE_CBC_SHA => 0xc01a,
347        TLS_SRP_SHA_RSA_WITH_3DES_EDE_CBC_SHA => 0xc01b,
348        TLS_SRP_SHA_DSS_WITH_3DES_EDE_CBC_SHA => 0xc01c,
349        TLS_SRP_SHA_WITH_AES_128_CBC_SHA => 0xc01d,
350        TLS_SRP_SHA_RSA_WITH_AES_128_CBC_SHA => 0xc01e,
351        TLS_SRP_SHA_DSS_WITH_AES_128_CBC_SHA => 0xc01f,
352        TLS_SRP_SHA_WITH_AES_256_CBC_SHA => 0xc020,
353        TLS_SRP_SHA_RSA_WITH_AES_256_CBC_SHA => 0xc021,
354        TLS_SRP_SHA_DSS_WITH_AES_256_CBC_SHA => 0xc022,
355        TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 => 0xc025,
356        TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 => 0xc026,
357        TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 => 0xc029,
358        TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 => 0xc02a,
359        TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 => 0xc02d,
360        TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 => 0xc02e,
361        TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 => 0xc031,
362        TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 => 0xc032,
363        TLS_ECDHE_PSK_WITH_RC4_128_SHA => 0xc033,
364        TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA => 0xc034,
365        TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA => 0xc035,
366        TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA => 0xc036,
367        TLS_ECDHE_PSK_WITH_AES_128_CBC_SHA256 => 0xc037,
368        TLS_ECDHE_PSK_WITH_AES_256_CBC_SHA384 => 0xc038,
369        TLS_ECDHE_PSK_WITH_NULL_SHA => 0xc039,
370        TLS_ECDHE_PSK_WITH_NULL_SHA256 => 0xc03a,
371        TLS_ECDHE_PSK_WITH_NULL_SHA384 => 0xc03b,
372        TLS_RSA_WITH_ARIA_128_CBC_SHA256 => 0xc03c,
373        TLS_RSA_WITH_ARIA_256_CBC_SHA384 => 0xc03d,
374        TLS_DH_DSS_WITH_ARIA_128_CBC_SHA256 => 0xc03e,
375        TLS_DH_DSS_WITH_ARIA_256_CBC_SHA384 => 0xc03f,
376        TLS_DH_RSA_WITH_ARIA_128_CBC_SHA256 => 0xc040,
377        TLS_DH_RSA_WITH_ARIA_256_CBC_SHA384 => 0xc041,
378        TLS_DHE_DSS_WITH_ARIA_128_CBC_SHA256 => 0xc042,
379        TLS_DHE_DSS_WITH_ARIA_256_CBC_SHA384 => 0xc043,
380        TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256 => 0xc044,
381        TLS_DHE_RSA_WITH_ARIA_256_CBC_SHA384 => 0xc045,
382        TLS_DH_anon_WITH_ARIA_128_CBC_SHA256 => 0xc046,
383        TLS_DH_anon_WITH_ARIA_256_CBC_SHA384 => 0xc047,
384        TLS_ECDHE_ECDSA_WITH_ARIA_128_CBC_SHA256 => 0xc048,
385        TLS_ECDHE_ECDSA_WITH_ARIA_256_CBC_SHA384 => 0xc049,
386        TLS_ECDH_ECDSA_WITH_ARIA_128_CBC_SHA256 => 0xc04a,
387        TLS_ECDH_ECDSA_WITH_ARIA_256_CBC_SHA384 => 0xc04b,
388        TLS_ECDHE_RSA_WITH_ARIA_128_CBC_SHA256 => 0xc04c,
389        TLS_ECDHE_RSA_WITH_ARIA_256_CBC_SHA384 => 0xc04d,
390        TLS_ECDH_RSA_WITH_ARIA_128_CBC_SHA256 => 0xc04e,
391        TLS_ECDH_RSA_WITH_ARIA_256_CBC_SHA384 => 0xc04f,
392        TLS_RSA_WITH_ARIA_128_GCM_SHA256 => 0xc050,
393        TLS_RSA_WITH_ARIA_256_GCM_SHA384 => 0xc051,
394        TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256 => 0xc052,
395        TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384 => 0xc053,
396        TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256 => 0xc054,
397        TLS_DH_RSA_WITH_ARIA_256_GCM_SHA384 => 0xc055,
398        TLS_DHE_DSS_WITH_ARIA_128_GCM_SHA256 => 0xc056,
399        TLS_DHE_DSS_WITH_ARIA_256_GCM_SHA384 => 0xc057,
400        TLS_DH_DSS_WITH_ARIA_128_GCM_SHA256 => 0xc058,
401        TLS_DH_DSS_WITH_ARIA_256_GCM_SHA384 => 0xc059,
402        TLS_DH_anon_WITH_ARIA_128_GCM_SHA256 => 0xc05a,
403        TLS_DH_anon_WITH_ARIA_256_GCM_SHA384 => 0xc05b,
404        TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256 => 0xc05c,
405        TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384 => 0xc05d,
406        TLS_ECDH_ECDSA_WITH_ARIA_128_GCM_SHA256 => 0xc05e,
407        TLS_ECDH_ECDSA_WITH_ARIA_256_GCM_SHA384 => 0xc05f,
408        TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 => 0xc060,
409        TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 => 0xc061,
410        TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256 => 0xc062,
411        TLS_ECDH_RSA_WITH_ARIA_256_GCM_SHA384 => 0xc063,
412        TLS_PSK_WITH_ARIA_128_CBC_SHA256 => 0xc064,
413        TLS_PSK_WITH_ARIA_256_CBC_SHA384 => 0xc065,
414        TLS_DHE_PSK_WITH_ARIA_128_CBC_SHA256 => 0xc066,
415        TLS_DHE_PSK_WITH_ARIA_256_CBC_SHA384 => 0xc067,
416        TLS_RSA_PSK_WITH_ARIA_128_CBC_SHA256 => 0xc068,
417        TLS_RSA_PSK_WITH_ARIA_256_CBC_SHA384 => 0xc069,
418        TLS_PSK_WITH_ARIA_128_GCM_SHA256 => 0xc06a,
419        TLS_PSK_WITH_ARIA_256_GCM_SHA384 => 0xc06b,
420        TLS_DHE_PSK_WITH_ARIA_128_GCM_SHA256 => 0xc06c,
421        TLS_DHE_PSK_WITH_ARIA_256_GCM_SHA384 => 0xc06d,
422        TLS_RSA_PSK_WITH_ARIA_128_GCM_SHA256 => 0xc06e,
423        TLS_RSA_PSK_WITH_ARIA_256_GCM_SHA384 => 0xc06f,
424        TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256 => 0xc070,
425        TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384 => 0xc071,
426        TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 => 0xc072,
427        TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 => 0xc073,
428        TLS_ECDH_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 => 0xc074,
429        TLS_ECDH_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 => 0xc075,
430        TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 => 0xc076,
431        TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 => 0xc077,
432        TLS_ECDH_RSA_WITH_CAMELLIA_128_CBC_SHA256 => 0xc078,
433        TLS_ECDH_RSA_WITH_CAMELLIA_256_CBC_SHA384 => 0xc079,
434        TLS_RSA_WITH_CAMELLIA_128_GCM_SHA256 => 0xc07a,
435        TLS_RSA_WITH_CAMELLIA_256_GCM_SHA384 => 0xc07b,
436        TLS_DHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 => 0xc07c,
437        TLS_DHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 => 0xc07d,
438        TLS_DH_RSA_WITH_CAMELLIA_128_GCM_SHA256 => 0xc07e,
439        TLS_DH_RSA_WITH_CAMELLIA_256_GCM_SHA384 => 0xc07f,
440        TLS_DHE_DSS_WITH_CAMELLIA_128_GCM_SHA256 => 0xc080,
441        TLS_DHE_DSS_WITH_CAMELLIA_256_GCM_SHA384 => 0xc081,
442        TLS_DH_DSS_WITH_CAMELLIA_128_GCM_SHA256 => 0xc082,
443        TLS_DH_DSS_WITH_CAMELLIA_256_GCM_SHA384 => 0xc083,
444        TLS_DH_anon_WITH_CAMELLIA_128_GCM_SHA256 => 0xc084,
445        TLS_DH_anon_WITH_CAMELLIA_256_GCM_SHA384 => 0xc085,
446        TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 => 0xc086,
447        TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 => 0xc087,
448        TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 => 0xc088,
449        TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 => 0xc089,
450        TLS_ECDHE_RSA_WITH_CAMELLIA_128_GCM_SHA256 => 0xc08a,
451        TLS_ECDHE_RSA_WITH_CAMELLIA_256_GCM_SHA384 => 0xc08b,
452        TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256 => 0xc08c,
453        TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384 => 0xc08d,
454        TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256 => 0xc08e,
455        TLS_PSK_WITH_CAMELLIA_256_GCM_SHA384 => 0xc08f,
456        TLS_DHE_PSK_WITH_CAMELLIA_128_GCM_SHA256 => 0xc090,
457        TLS_DHE_PSK_WITH_CAMELLIA_256_GCM_SHA384 => 0xc091,
458        TLS_RSA_PSK_WITH_CAMELLIA_128_GCM_SHA256 => 0xc092,
459        TLS_RSA_PSK_WITH_CAMELLIA_256_GCM_SHA384 => 0xc093,
460        TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256 => 0xc094,
461        TLS_PSK_WITH_CAMELLIA_256_CBC_SHA384 => 0xc095,
462        TLS_DHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 => 0xc096,
463        TLS_DHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 => 0xc097,
464        TLS_RSA_PSK_WITH_CAMELLIA_128_CBC_SHA256 => 0xc098,
465        TLS_RSA_PSK_WITH_CAMELLIA_256_CBC_SHA384 => 0xc099,
466        TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256 => 0xc09a,
467        TLS_ECDHE_PSK_WITH_CAMELLIA_256_CBC_SHA384 => 0xc09b,
468        TLS_RSA_WITH_AES_128_CCM => 0xc09c,
469        TLS_RSA_WITH_AES_256_CCM => 0xc09d,
470        TLS_DHE_RSA_WITH_AES_128_CCM => 0xc09e,
471        TLS_DHE_RSA_WITH_AES_256_CCM => 0xc09f,
472        TLS_RSA_WITH_AES_128_CCM_8 => 0xc0a0,
473        TLS_RSA_WITH_AES_256_CCM_8 => 0xc0a1,
474        TLS_DHE_RSA_WITH_AES_128_CCM_8 => 0xc0a2,
475        TLS_DHE_RSA_WITH_AES_256_CCM_8 => 0xc0a3,
476        TLS_PSK_WITH_AES_128_CCM => 0xc0a4,
477        TLS_PSK_WITH_AES_256_CCM => 0xc0a5,
478        TLS_DHE_PSK_WITH_AES_128_CCM => 0xc0a6,
479        TLS_DHE_PSK_WITH_AES_256_CCM => 0xc0a7,
480        TLS_PSK_WITH_AES_128_CCM_8 => 0xc0a8,
481        TLS_PSK_WITH_AES_256_CCM_8 => 0xc0a9,
482        TLS_PSK_DHE_WITH_AES_128_CCM_8 => 0xc0aa,
483        TLS_PSK_DHE_WITH_AES_256_CCM_8 => 0xc0ab,
484        TLS_ECDHE_ECDSA_WITH_AES_128_CCM => 0xc0ac,
485        TLS_ECDHE_ECDSA_WITH_AES_256_CCM => 0xc0ad,
486        TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 => 0xc0ae,
487        TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8 => 0xc0af,
488        TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 => 0xccaa,
489        TLS_PSK_WITH_CHACHA20_POLY1305_SHA256 => 0xccab,
490        TLS_ECDHE_PSK_WITH_CHACHA20_POLY1305_SHA256 => 0xccac,
491        TLS_DHE_PSK_WITH_CHACHA20_POLY1305_SHA256 => 0xccad,
492        TLS_RSA_PSK_WITH_CHACHA20_POLY1305_SHA256 => 0xccae,
493        SSL_RSA_FIPS_WITH_DES_CBC_SHA => 0xfefe,
494        SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA => 0xfeff,
495    }
496}
497
498enum_builder! {
499    /// The `SignatureScheme` TLS protocol enum.  Values in this enum are taken
500    /// from the various RFCs covering TLS, and are listed by IANA.
501    /// The `Unknown` item is used when processing unrecognised ordinals.
502    #[repr(u16)]
503    pub enum SignatureScheme {
504        RSA_PKCS1_SHA1 => 0x0201,
505        ECDSA_SHA1_Legacy => 0x0203,
506        RSA_PKCS1_SHA256 => 0x0401,
507        ECDSA_NISTP256_SHA256 => 0x0403,
508        RSA_PKCS1_SHA384 => 0x0501,
509        ECDSA_NISTP384_SHA384 => 0x0503,
510        RSA_PKCS1_SHA512 => 0x0601,
511        ECDSA_NISTP521_SHA512 => 0x0603,
512        RSA_PSS_SHA256 => 0x0804,
513        RSA_PSS_SHA384 => 0x0805,
514        RSA_PSS_SHA512 => 0x0806,
515        ED25519 => 0x0807,
516        ED448 => 0x0808,
517    }
518}
519
520impl SignatureScheme {
521    pub(crate) fn algorithm(&self) -> SignatureAlgorithm {
522        match *self {
523            Self::RSA_PKCS1_SHA1
524            | Self::RSA_PKCS1_SHA256
525            | Self::RSA_PKCS1_SHA384
526            | Self::RSA_PKCS1_SHA512
527            | Self::RSA_PSS_SHA256
528            | Self::RSA_PSS_SHA384
529            | Self::RSA_PSS_SHA512 => SignatureAlgorithm::RSA,
530            Self::ECDSA_SHA1_Legacy
531            | Self::ECDSA_NISTP256_SHA256
532            | Self::ECDSA_NISTP384_SHA384
533            | Self::ECDSA_NISTP521_SHA512 => SignatureAlgorithm::ECDSA,
534            Self::ED25519 => SignatureAlgorithm::ED25519,
535            Self::ED448 => SignatureAlgorithm::ED448,
536            _ => SignatureAlgorithm::Unknown(0),
537        }
538    }
539
540    /// Whether a particular `SignatureScheme` is allowed for TLS protocol signatures
541    /// in TLS1.3.
542    ///
543    /// This prevents (eg) RSA_PKCS1_SHA256 being offered or accepted, even if our
544    /// verifier supports it for other protocol versions.
545    ///
546    /// See RFC8446 s4.2.3: <https://datatracker.ietf.org/doc/html/rfc8446#section-4.2.3>
547    ///
548    /// This is a denylist so that newly-allocated `SignatureScheme`s values are
549    /// allowed in TLS1.3 by default.
550    pub(crate) fn supported_in_tls13(&self) -> bool {
551        let [hash, sign] = self.to_array();
552
553        // This covers both disallowing SHA1 items in `SignatureScheme`, and
554        // old hash functions.  See the section beginning "Legacy algorithms:"
555        // and item starting "In TLS 1.2, the extension contained hash/signature
556        // pairs" in RFC8446 section 4.2.3.
557        match HashAlgorithm::from(hash) {
558            HashAlgorithm::NONE
559            | HashAlgorithm::MD5
560            | HashAlgorithm::SHA1
561            | HashAlgorithm::SHA224 => return false,
562            _ => (),
563        };
564
565        // RSA-PKCS1 is also disallowed for TLS1.3, see the section beginning
566        // "RSASSA-PKCS1-v1_5 algorithms:" in RFC8446 section 4.2.3.
567        //
568        // (nb. SignatureAlgorithm::RSA is RSA-PKCS1, and does not cover RSA-PSS
569        // or RSAE-PSS.)
570        //
571        // This also covers the outlawing of DSA mentioned elsewhere in 4.2.3.
572        !matches!(
573            SignatureAlgorithm::from(sign),
574            SignatureAlgorithm::Anonymous | SignatureAlgorithm::RSA | SignatureAlgorithm::DSA
575        )
576    }
577}
578
579enum_builder! {
580    /// The `SignatureAlgorithm` TLS protocol enum.  Values in this enum are taken
581    /// from the various RFCs covering TLS, and are listed by IANA.
582    /// The `Unknown` item is used when processing unrecognised ordinals.
583    #[repr(u8)]
584    pub enum SignatureAlgorithm {
585        Anonymous => 0x00,
586        RSA => 0x01,
587        DSA => 0x02,
588        ECDSA => 0x03,
589        ED25519 => 0x07,
590        ED448 => 0x08,
591    }
592}
593
594enum_builder! {
595    /// The "TLS Certificate Compression Algorithm IDs" TLS protocol enum.
596    /// Values in this enum are taken from [RFC8879].
597    ///
598    /// [RFC8879]: https://www.rfc-editor.org/rfc/rfc8879.html#section-7.3
599    #[repr(u16)]
600    pub enum CertificateCompressionAlgorithm {
601        Zlib => 1,
602        Brotli => 2,
603        Zstd => 3,
604    }
605}
606
607enum_builder! {
608    /// The type of Encrypted Client Hello (`EchClientHelloType`).
609    ///
610    /// Specified in [draft-ietf-tls-esni Section 5].
611    ///
612    /// [draft-ietf-tls-esni Section 5]: <https://www.ietf.org/archive/id/draft-ietf-tls-esni-18.html#section-5>
613    #[repr(u8)]
614    pub enum EchClientHelloType {
615        ClientHelloOuter => 0,
616        ClientHelloInner => 1
617    }
618}
619
620#[cfg(test)]
621mod tests {
622    use super::*;
623    use crate::msgs::enums::tests::{test_enum8, test_enum16};
624
625    #[test]
626    fn test_enums() {
627        test_enum8::<SignatureAlgorithm>(SignatureAlgorithm::Anonymous, SignatureAlgorithm::ECDSA);
628        test_enum8::<ContentType>(ContentType::ChangeCipherSpec, ContentType::Heartbeat);
629        test_enum8::<HandshakeType>(HandshakeType::HelloRequest, HandshakeType::MessageHash);
630        test_enum8::<AlertDescription>(
631            AlertDescription::CloseNotify,
632            AlertDescription::NoApplicationProtocol,
633        );
634        test_enum16::<CertificateCompressionAlgorithm>(
635            CertificateCompressionAlgorithm::Zlib,
636            CertificateCompressionAlgorithm::Zstd,
637        );
638    }
639
640    #[test]
641    fn tls13_signature_restrictions() {
642        // rsa-pkcs1 denied
643        assert!(!SignatureScheme::RSA_PKCS1_SHA1.supported_in_tls13());
644        assert!(!SignatureScheme::RSA_PKCS1_SHA256.supported_in_tls13());
645        assert!(!SignatureScheme::RSA_PKCS1_SHA384.supported_in_tls13());
646        assert!(!SignatureScheme::RSA_PKCS1_SHA512.supported_in_tls13());
647
648        // dsa denied
649        assert!(!SignatureScheme::from(0x0201).supported_in_tls13());
650        assert!(!SignatureScheme::from(0x0202).supported_in_tls13());
651        assert!(!SignatureScheme::from(0x0203).supported_in_tls13());
652        assert!(!SignatureScheme::from(0x0204).supported_in_tls13());
653        assert!(!SignatureScheme::from(0x0205).supported_in_tls13());
654        assert!(!SignatureScheme::from(0x0206).supported_in_tls13());
655
656        // common
657        assert!(SignatureScheme::ED25519.supported_in_tls13());
658        assert!(SignatureScheme::ED448.supported_in_tls13());
659        assert!(SignatureScheme::RSA_PSS_SHA256.supported_in_tls13());
660        assert!(SignatureScheme::RSA_PSS_SHA384.supported_in_tls13());
661        assert!(SignatureScheme::RSA_PSS_SHA512.supported_in_tls13());
662
663        // rsa_pss_rsae_*
664        assert!(SignatureScheme::from(0x0804).supported_in_tls13());
665        assert!(SignatureScheme::from(0x0805).supported_in_tls13());
666        assert!(SignatureScheme::from(0x0806).supported_in_tls13());
667
668        // ecdsa_brainpool*
669        assert!(SignatureScheme::from(0x081a).supported_in_tls13());
670        assert!(SignatureScheme::from(0x081b).supported_in_tls13());
671        assert!(SignatureScheme::from(0x081c).supported_in_tls13());
672    }
673}
rustls/enums.rs

rustls/
enums.rs
